Description

You will own the security of the SDLC, implementation, and operational maintenance of information security controls across cloud and on-premise environments.

Responsibilities

• Oversee security solution implementation and develop technical reference architectures throughout project lifecycles.
• Review and assess security designs for technology upgrades and end-to-end integrations, including web services and APIs.
• Collaborate with system integrators to apply NIST and NYDFS frameworks when securing data across hybrid platforms.
• Monitor information systems for security incidents and vulnerabilities, developing visibility capabilities and reporting on trends.
• Respond to security incidents, including investigations, implementation of countermeasures, and recovery from unauthorized access.

Required Skills

• 7+ years of experience in system design and security engineering across cloud and on-premise environments.
• Strong knowledge of Secure SDLC and OWASP principles.
• Deep understanding of NIST frameworks and secure design reviews.
• Experience with identity and access management protocols.
• Proven ability to develop security requirements for complex, internet-facing applications.
• Bachelor’s or Master’s degree from an accredited institution or equivalent work experience.
• Professional certifications such as CCSP, CISSP, CISA, or Azure Solutions Architect Certification.

Preferred Skills

• Expertise in IAM, SAML, Federation, PAM, and MFA technologies.
• Experience with Data Security, cryptography, encryption, and DLP tool configuration.
• Knowledge of CASB, vulnerability scanning tools, and centralized management of next-generation firewalls or IDS/IPS.

Key Skills

Education

Bachelor’s or Master’s degree